■ June' 28, 2000 



09:35 



1 



2/5/1 (Item 1 from file: 351) 

DIALOG (R) File 351 : DERWENT WPI 
(c) 2000 Derwent Info Ltd. All rts. reserv. 

011986436 **Image available** 

WPI Acc No: 1998-403346/199835 

XRPX Acc No: N98-314332 
User authentication method for computer system - involves performing 
login refusal when finger print input does not correspond to input user 
ID 

Patent Assignee: HITACHI LTD (HITA ) 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

JP 10161979 A 19980619 JP 96315924 A 19961127 199835 B 

Priority Applications (No Type Date) : JP 96315924 A 19961127 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
JP 10161979 A 4 G06F-015/00 



Abstract (Basic) : JP 10161979 A 

The method involves inputting user ID, password and finger print at 
the time of login to a server from a client. The systems demands for a 
finger print input after user ID and password input from the client 
side. A finger print recognition apparatus which is connected to the 
client, judges whether the finger print applicable to user ID is input. 

When the finger print applicable to user ID is input, the input 
password is converted and an authentication demand is advanced to 
server by the password converted with user ID when the password 
converted by user ID and client side differs, the user authentication 
to server is not performed and vice versa. Based on the result, the 
completion of login or login r-efusal is done. 

ADVANTAGE - Prevents inaccurate login even when user ID and 
password are correct . 
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PROBLEM TO 



ABSTRACT 

BE SOLVED: To prevent illegal log-in even when a user ID and a 



June' 28, 2000 



09: 35 



password are stolen in the case of user authentication by the user ID and 
the password at a system where a client utilizes a server. 

SOLUTION : A fingerprint recognizing device 30 is added to a client 20, 
three input requests of user ID, password and fingerprint are outputted at 
the time of user log-in, when the fingerprint relevant to the user ID is 
the inputted password is converted and a certificate request is 
to a server 10 by the inputted user ID and the converted 
At the client 20, the algorithm for converting the password is 
The user ID and the password to be converted on the side of 
are previously registered in the server 10. This password 
in the server 10 is made different from the password to be 
inputted by the user, and made secret. The user is certified by the 
inputted user ID and the secret password registered in the server 10. 
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